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FIG. 3 



Determining a hierarchy of route 
advertisement optimization for an 

enterprise 
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Determining the number of route 
advertisement aggregation points 
at each level of the hierarchy 
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Rounding each number up to a 
power of a base number of the 
address plan 
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Determining a number of 
separate network security policy 
areas for the enterprise 
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Determining a number of 
addresses for each of the 
separate network security policy 
areas at the lowest level of route 
advertisement aggregation 
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Rounding each number of 
addresses up to a power of the 

base number to produce a 
plurality of rounded addresses 
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I Allocating an address range for 
each of the plurality of rounded 
addresses so that a starting 
address of the address range 
begins on a multiple of a power of 
the base number 
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Determining the size of the policy 

areas 1 26 

i ^T—^r 



Rounding the size of the policy 
areas up to a power of the base 
number to produce the size of a 
repeating policy pattern 
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Assigning an iteration of the 
repeating policy pattern to each of 
the route advertisement 
aggregation points 

Determining an address and a 
mask for each of the network 
security policy areas in the 
repeating policy pattern 
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Dividing the network address 
space into a plurality of adjacent 
identical repeating policy patterns 
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Determining a beginning address 
for each of the plurality of policy 
areas within the adjacent identical 
repeating policy patterns 
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Determining a size mask that 
represents a policy area in a first 
section of the repeating policy 

patterns 
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Determining a pattern mask that 
represents the first repeating 
policy pattern 
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Determining an all patterns mask 
that represents all the repeating 
policy patterns 



I 



48 



Determining an address and a 
resultant mask using the size 
mask, the pattern mask, and the 
all patterns mask 
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FIG. 7 



Dividing the network address 
space into a plurality of adjacent 
identical repeating policy patterns 

; 

Determining a size mask that 
represents a policy area in a n th 
section of the repeating policy 

patterns 

Determining a pattern mask that 
represents the n th repeating 
policy pattern 
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Determining an all patterns mask 
that represents all the repeating 
policy patterns 



I 



Determining an address and a 
resultant mask using the size 
mask, the pattern mask, and the 
all patterns mask 
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